deno vulnerabilities

Recent CVEs affecting deno products. 10 tracked.

deno has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2026-06-23. Highest priority: CVE-2026-49402 (score 48/100).

• CVE-2026-49402 HIGH 8.1 UPGRADE Deno is a JavaScript, TypeScript, and WebAssembly runtime
• CVE-2026-44726 HIGH 7.4 UPGRADE Deno is a JavaScript, TypeScript, and WebAssembly runtime
• CVE-2026-49440 HIGH 7.4 UPGRADE Deno is a JavaScript, TypeScript, and WebAssembly runtime
• CVE-2026-49401 HIGH 7.3 UPGRADE Deno is a JavaScript, TypeScript, and WebAssembly runtime
• CVE-2026-49411 MEDIUM 6.5 UPGRADE Deno is a JavaScript, TypeScript, and WebAssembly runtime
• CVE-2026-49406 MEDIUM 5.5 UPGRADE Deno is a JavaScript, TypeScript, and WebAssembly runtime
• CVE-2026-55517 MEDIUM 4.3 UPGRADE Deno is a JavaScript, TypeScript, and WebAssembly runtime
• CVE-2026-49859 MEDIUM 5.2 UPGRADE Deno is a JavaScript, TypeScript, and WebAssembly runtime
• CVE-2026-49860 MEDIUM 5.2 UPGRADE Deno is a JavaScript, TypeScript, and WebAssembly runtime
• CVE-2026-49983 MEDIUM 5.2 UPGRADE Deno is a JavaScript, TypeScript, and WebAssembly runtime

FAQ

How do I fix deno vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is deno being exploited right now?

None of the tracked deno CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which deno CVE should I patch first?

CVE-2026-49402 currently ranks highest (48/100): Deno is a JavaScript, TypeScript, and WebAssembly runtime.

Products

• deno

← Back to latest CVEs